79f4032930b596fea7bbed5727721c6b_JaffaCakes118

General

Target
79f4032930b596fea7bbed5727721c6b_JaffaCakes118
Size 814KB
Sample240527-v8zcaach64
SHA256 690c24be4531618bbd6c290d7f8d4862f502e974ee4cfafcc10418e480fee985
MD5 79f4032930b596fea7bbed5727721c6b
SHA1 fa1f50340c3e2349a689008e932b952f239bb1fb
SHA512 cfb29e1c5f43d3bde3518b62862b441aca3aed4379354ddbad7b558d5e1af3f3cc891c7007941e5649d3c467aad69b07870aee4411fd4dcd2ef768b5e5038960
SSDEEP 24576:ieu+Vs4yZxSwWDwmnVOiaUSeoiyF7l0ojB2+:5ugsXxSZnO9eoiyVqsA+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79f4032930b596fea7bbed5727721c6b_JaffaCakes118

File Explorer

79f4032930b596fea7bbed5727721c6b_JaffaCakes118

.exe 814KB

79f4032930b596fea7bbed5727721c6b_JaffaCakes118

IMPHASH 15c2d3d61bb5a5dc8b7cd40e5783e3ba
SHA256 690c24be4531618bbd6c290d7f8d4862f502e974ee4cfafcc10418e480fee985
MD5 79f4032930b596fea7bbed5727721c6b
SHA1 fa1f50340c3e2349a689008e932b952f239bb1fb
SHA512 cfb29e1c5f43d3bde3518b62862b441aca3aed4379354ddbad7b558d5e1af3f3cc891c7007941e5649d3c467aad69b07870aee4411fd4dcd2ef768b5e5038960
SSDEEP 24576:ieu+Vs4yZxSwWDwmnVOiaUSeoiyF7l0ojB2+:5ugsXxSZnO9eoiyVqsA+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

101410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetTempPathW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId CloseHandle WaitForSingleObject FreeLibrary DeleteCriticalSection VirtualProtect GetProcAddress GetModuleFileNameW GetCommandLineW GetTickCount CreateEventA Sleep SetEvent GetCurrentProcess DeleteFileW CreateEventW GetLastError CopyFileW GetFullPathNameW GetCurrentProcessId LoadLibraryA VirtualFree SizeofResource LoadResource FindResourceW VirtualAlloc GetModuleHandleA HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

BuildExplicitAccessWithNameA AddAccessAllowedAceEx BuildSecurityDescriptorW

comctl32

ImageList_LoadImageA PropertySheetA CreatePropertySheetPageW

Sharing

General

Malware Config

Signatures

File Explorer

79f4032930b596fea7bbed5727721c6b_JaffaCakes118

kernel32

advapi32

comctl32

generic